Wireshark-bugs: [Wireshark-bugs] [Bug 10525] need to handle TCP retransmissions - and out-of-ord

Date: Sat, 04 Oct 2014 23:55:51 +0000

Comment # 4 on bug 10525 from
(In reply to Evan Huus from comment #3)
> Perhaps that preference:
> - needs a more descriptive name
> - should be enabled by default
> Although it can sometimes be useful to see the decoding of
> retransmitted/out-of-order packets, so I'm not sure where the best balance
> is to be struck.
Well I think it should be enabled by default, any dissector doing decryption
won't appriciate replay and also if the payload is part of a fragmented payload
it might still mess with the dissector.

So for DCE RPC, SSL it's definetively a 'yes' for enabled by default for the
rest I can't say. If nobody oppose I think it should be made default if there
is a few procotols that it proves to be a bad idea then why not having an
option on those protocol to still call subdissector.

(In reply to Evan Huus from comment #2)
> We can already do this. Please ensure the "Do not call subdissectors for
> error packets" preference is checked in your TCP protocol preferences.
> 
> If there is a case where we are incorrectly continuing dissection even with
> this preference selected, please attach the capture file triggering this and
> be specific as to where it is occurring.

Ok that's working this way, but does wireshark handle out of order ? If not we
can keep this bug open.


You are receiving this mail because:
  • You are watching all bug changes.